At Brainshare, in two of the OES classes I took, we were told not to install NDS, LDAP or NSS, and possibly some other services, as root. Instead, we were told to enable an ndsadmin user in LUM and perhaps an LDAPadmin or utility admin for the purpose of doing these installs.

Does that mean that we need to login to the Linux system as ndsadmin and run the install of the NDS first and then login as utility and install other services? What rights do we need to give these LUM users in order to be able to do these installs? Do they need to be root equivalents? Also, sudo wouldn't make sense because I'm using the graphical interface to do the install. Am I missing something here? Is there a good TID that describes the recommended way to do this?